At least four lawsuits have been filed in the U.S. District Court for the District of Massachusetts against Harvard Pilgrim Health Care and parent company Point32Health from the fallout of an April ransomware attack, The HIPAA Journal reported June 13.
The attack exposed patient names, addresses, phone numbers, birthdates, health insurance account information, Social Security numbers, provider taxpayer ID numbers and clinical information.
The lawsuit filed on behalf of Harvard Pilgrim Health Care member Valeria Salerno Gonzales alleges the health insurance company "intentionally, willfully, recklessly, or negligently" maintained sensitive data.
The IT systems supporting the Harvard Pilgrim Health Care and Medicare Advantage Stride plans have yet to return online.